OnWorks favicon

compartment - Online in the Cloud

Run compartment in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command compartment that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator



compartment - secure program/service wrapper


compartment [--cap CAPSET] [--chroot PATH] [--user USER] [--group GROUP] [--init PROGRAM]
[--verbose] [--quiet] [--fork] /full/path/to/program


The Secure Compartment was designed to allow safe execution of priviliged and/or untrusted
executables and services. It has got all features possible included, which can be used to
minimize the risk of a trojanized or vulnerable program/service.


--cap CAPSET
sets the defined CAPABILITY for the process. See the README file and the section
LIMITATIONS for more information and examples.

--chroot PATH
chroots to the PATH defined. It has to be a valid chroot environment. See the
README file for more information and examples.

--user USER
runs the program with uid/euid of USER

--group GROUP
runs the program with gid/egid of GROUP

--init PROGRAM
runs PROGRAM before running the untrusted program/service, e.g. to build a chroot

prints detailled information what compartment does.

--quit does not print syslog information about the use of compartment

--fork forks if everything was set up correctly, mother process will exit.


Linux Capabilities

supports all Linux capabilites
(see /usr/include/linux/capability.h and the README file)


supports a chroot setup


supports running with defined user and/or group privileges

Setup Scripts

supports running of initial scripts
before running a program/service, e.g. to build a chroot environment.


Currently the kernel does not allow capabilities on processes which are not running with
euid 0. Therefore compartment will exit with an error if --user and --cap is used

Please note that this will change for the 2.4 kernel.

Use compartment online using onworks.net services

Free Servers & Workstations

Download Windows & Linux apps

Linux commands